Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/86a03261-9bee-3f12-a21c-5f5e988ed6b8.roa
File: 86a03261-9bee-3f12-a21c-5f5e988ed6b8.roa (raw, json)
Hash identifier: 1aGQEYY3NiCEmJ+WbhKHR7CH1r09mZnw1ibhUEANigs=
Subject key identifier: DA:86:2C:E6:7D:E1:BC:8C:2F:05:1C:D1:40:10:D5:7A:AD:8B:69:9D
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD211460142A0AA995048B40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/86a03261-9bee-3f12-a21c-5f5e988ed6b8.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397242
IP address blocks: 156.154.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:21:14:60:14:2a:0a:a9:95:04:8b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=13817bc5-577b-4ce9-b17c-881df55c4725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ab:4d:5d:b3:89:3f:7c:34:73:9e:b1:74:43:
e8:ed:7d:79:8e:6a:de:2e:76:1f:62:74:5a:01:79:
bb:91:a1:3d:25:39:ba:9e:c6:82:4a:a3:f2:d6:33:
3a:3b:80:44:8f:c8:4d:ec:19:14:11:da:ee:7a:02:
a3:2c:00:99:ae:ea:59:49:d4:f2:fa:b4:29:c4:db:
28:29:83:b9:a5:79:77:1e:e1:ca:7b:fe:8a:11:92:
d8:c6:6d:74:a2:3e:b1:23:ff:9e:8d:50:29:eb:3d:
fa:eb:aa:45:e8:19:b0:e3:54:cf:9e:cc:22:04:c7:
76:7a:4a:5f:3a:36:0e:0d:ac:83:5e:05:38:af:03:
b7:28:d6:1e:12:18:bd:a1:dd:a2:d7:86:bd:12:2c:
79:24:c7:b6:9f:e5:6d:f6:9f:38:68:cb:10:81:d5:
a6:19:19:4c:80:04:ab:6c:b7:fe:ce:c4:c2:08:aa:
25:4d:bf:c5:94:01:ca:82:fd:f7:60:32:0f:31:04:
64:76:8e:0d:ee:c8:fb:3b:8d:a7:06:72:70:ec:fa:
67:98:82:42:6a:55:07:98:45:f0:db:f2:86:b7:c6:
a9:37:ff:a2:ec:57:81:fe:4b:c4:1a:90:43:98:5b:
e1:40:f4:cd:51:b8:2f:43:8d:9a:ba:56:e7:0b:a1:
8f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:86:2C:E6:7D:E1:BC:8C:2F:05:1C:D1:40:10:D5:7A:AD:8B:69:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/86a03261-9bee-3f12-a21c-5f5e988ed6b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.174.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:da:a6:91:c2:69:d1:8e:95:af:45:74:a4:33:c4:4d:3b:5b:
f0:70:e2:fe:26:6d:98:fd:e4:71:8c:e1:e7:49:78:ec:c7:7a:
15:3f:39:2c:71:64:be:15:9c:17:05:b6:5f:d3:dc:d7:5c:ea:
96:e1:a9:d6:b0:38:ac:f9:86:08:64:8b:53:68:58:56:78:03:
89:4c:6b:ca:b8:90:b1:09:e6:d2:bd:5e:b2:25:ad:ba:48:e4:
b4:cf:71:51:fd:32:8d:2e:56:c9:21:f9:ae:91:1a:0e:3a:db:
12:5e:a1:2e:06:81:d3:21:d6:ec:dd:26:e0:30:2b:53:17:8b:
d9:86:fa:a5:96:26:49:78:76:3c:98:5e:bf:82:41:fe:65:b8:
90:4c:3b:2f:87:81:9a:9a:a5:d9:63:98:61:3b:3f:f4:ae:18:
6f:8b:06:b0:bf:3c:e2:75:9a:f6:3f:38:e4:da:36:39:f9:fa:
e0:4f:42:5d:6d:33:08:e3:4d:a9:6e:27:4b:99:ff:c3:cc:e8:
b5:69:71:0d:66:5f:9a:df:7f:57:ea:b4:9f:6b:41:15:be:fa:
67:43:aa:23:e9:24:90:85:92:33:f0:53:a3:ff:67:03:11:3e:
e9:c2:20:eb:70:35:7c:c7:78:13:22:52:19:40:ae:8b:a6:84:
9d:c3:38:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:59:27 2025 by rpki-client